PayTR Virtual POS Payment Gateway for CS-Cart - Multivendor

Softcrafter PayTR adds PayTR's iFrame V2 checkout to CS-Cart and Multi-Vendor. The customer pays on PayTR's hosted form, and no card number ever reaches your store.

What decides whether an order is paid

PayTR's server-to-server notification, and nothing else. The return page a customer lands on confirms nothing; the add-on marks an order paid only when a notification arrives with a signature that verifies against your merchant key. A forged or replayed notification cannot pay an order, and a repeated one cannot pay it twice.

Refunds an operator can be trusted with

• Two steps: a refund is requested, then confirmed, by an administrator who holds the privilege for it.
• An ambiguous result is never resent. That is the one rule that keeps a customer from being refunded twice; the unresolved item is queued for a status query or an authorised reconciliation instead.
• Every request, answer and blocked status change is appended to an audit trail under the order.

Operations

• Three privileges, so viewing transactions, issuing refunds and running reconciliation can be held by different people.
• A shut-off valve: stop accepting new payments without closing the notification receiver, so payments already in flight still complete.
• Merchant key and salt are stored encrypted and are write-only in the interface.

Requirements

• CS-Cart or Multi-Vendor 4.20.x, PHP 8.1 or newer
• A PayTR merchant account (Merchant ID, Key and Salt)
• HTTPS reachable from the internet. PayTR posts the notification to your store; without it a customer pays and the order stays unpaid.
• Turkish Lira. Instalment options are chosen by PayTR.

Full documentation, in English and Turkish: docs.softcrafter.dev/sc-pay-tr

Built and supported by Softcrafter · tech@softcrafter.net